Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zHQuaQDyBr5y4Quia54_dpaIaOg.roa
File: zHQuaQDyBr5y4Quia54_dpaIaOg.roa (raw, json)
Hash identifier: g3FS+fNQP0JfZkKUNSOlU+b79FNx/q825/3wnbI6ijw=
Subject key identifier: CC:74:2E:69:00:F2:06:BE:72:E1:0B:A2:6B:9E:3F:76:96:88:68:E8
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0183EF167D7ABB36C6A9050261F18A610456
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zHQuaQDyBr5y4Quia54_dpaIaOg.roa
Signing time: Wed 19 Oct 2022 07:12:52 +0000
ROA not before: Wed 19 Oct 2022 07:12:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 393427
IP address blocks: 176.221.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:16:7d:7a:bb:36:c6:a9:05:02:61:f1:8a:61:04:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 19 07:12:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc742e6900f206be72e10ba26b9e3f76968868e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4d:22:62:22:29:d5:5b:7f:be:89:08:5f:a5:
bc:5c:54:22:84:30:9b:70:f6:73:90:df:9a:68:eb:
a1:6c:12:3f:56:9d:d0:c4:a0:7c:c4:ee:da:42:ee:
8d:d5:a9:66:c6:96:03:87:ff:43:d0:50:98:14:78:
26:87:cb:89:36:95:b4:d2:e9:48:6f:67:bb:15:6f:
e0:0b:1b:4d:67:3f:49:2b:51:a7:8d:11:43:05:60:
08:ed:e8:6a:38:66:a7:b9:f4:cc:66:40:8f:29:f0:
69:b0:0d:f6:26:32:88:dc:bc:f1:fe:07:d7:09:a2:
13:4f:e2:96:b7:8f:55:8b:27:d8:a0:b8:df:99:54:
f9:d1:14:fb:e5:3a:04:64:62:d8:05:ac:a1:a1:1c:
91:16:16:25:e6:27:79:e8:50:be:b5:74:2d:b2:0d:
ab:9b:e3:b1:35:5c:31:40:77:ee:d0:f1:d9:3e:40:
82:21:1e:3a:33:b5:92:f6:ef:35:44:33:ee:98:cb:
1e:e5:87:13:fe:b8:3a:ec:e5:35:d6:51:7c:e7:b9:
44:ca:17:96:ff:91:10:92:46:fe:b1:93:91:5f:db:
46:78:03:4b:31:44:c8:b8:a5:2e:85:8c:91:ea:23:
c7:03:d1:fd:07:c1:a4:3b:9a:de:36:5d:14:4a:0a:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:74:2E:69:00:F2:06:BE:72:E1:0B:A2:6B:9E:3F:76:96:88:68:E8
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zHQuaQDyBr5y4Quia54_dpaIaOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:e1:4e:17:49:91:0b:71:ef:69:f9:c9:20:bd:91:77:4b:8c:
3a:28:08:c2:92:97:47:ea:1a:21:53:e3:c3:07:9f:68:a4:46:
9e:80:d1:b6:af:66:61:81:b3:d0:80:2e:b9:d9:09:bd:d6:08:
49:6e:7d:89:28:bb:31:16:b4:0b:56:39:cd:18:d9:3a:45:01:
a8:2f:35:d8:68:f8:2d:24:79:c3:29:b1:38:9f:c0:98:d1:76:
95:e7:33:59:10:43:f5:af:16:64:d8:96:fb:e7:2b:69:c9:39:
0a:2a:f3:1c:a1:70:ab:13:2c:94:27:a3:11:26:3e:ed:8d:94:
d4:81:15:f0:95:bf:84:dd:28:61:ff:ed:2c:f7:75:b1:0a:a5:
ab:79:75:f3:50:c2:c1:c5:8f:85:f8:55:45:e8:06:b0:08:3c:
83:97:76:b1:40:8d:69:39:d6:4f:f8:22:b8:01:1b:b7:4b:33:
55:45:7f:b8:30:9b:c5:bd:65:f0:37:6e:5b:4f:ea:45:69:68:
6a:62:88:bb:3e:e8:aa:cd:7c:5d:d7:4c:79:5b:35:fd:c1:3e:
71:9e:8c:31:5c:ec:e3:70:83:e4:8c:97:aa:f1:db:37:b9:39:
51:b0:6a:22:40:9b:c7:a7:c6:c4:cf:0f:97:89:c3:82:88:1d:
da:00:8c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:22 2025 by rpki-client